This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/1-u_ASCmy-wBbVCsmPwNd_unSr-o.roa File: 1-u_ASCmy-wBbVCsmPwNd_unSr-o.roa (raw, json) Hash identifier: udykiCdiD6b52lyV5MbUE3j2dFhwVQCOpp4kLMvK92o= Subject key identifier: FA:EF:C0:48:29:B2:FB:00:5B:54:2B:26:3F:03:5D:FE:E9:D2:AF:EA Certificate issuer: /CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0 Certificate serial: 019B7C131796CA1DF672EE5812A5D79B4B53 Authority key identifier: EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/1-u_ASCmy-wBbVCsmPwNd_unSr-o.roa Signing time: Fri 02 Jan 2026 00:19:44 +0000 ROA not before: Fri 02 Jan 2026 00:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31621 IP address blocks: 91.194.188.0/23 maxlen: 24 91.194.188.0/24 maxlen: 24 178.21.152.0/21 maxlen: 24 178.21.153.0/24 maxlen: 24 185.31.24.0/22 maxlen: 24 193.23.48.0/24 maxlen: 24 194.0.251.0/24 maxlen: 24 2a02:dcc::/32 maxlen: 48 2a02:dcc:22::/48 maxlen: 48 2a02:dcd::/32 maxlen: 48 2a02:dce::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:17:96:ca:1d:f6:72:ee:58:12:a5:d7:9b:4b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0 Validity Not Before: Jan 2 00:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=faefc04829b2fb005b542b263f035dfee9d2afea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:49:1d:55:1a:be:28:2b:09:82:14:17:b0:89: b2:16:de:6f:dc:e9:78:c9:6c:d8:d8:53:1a:bf:97: 3d:e6:b0:2c:76:82:4d:29:7e:15:f8:c3:20:91:e1: ef:34:26:02:d3:71:bb:ae:7a:0b:e5:92:cb:a4:fb: 1e:35:b5:28:4f:e7:f6:f4:89:56:64:d2:03:cd:f8: b4:9d:a2:e0:34:70:0c:c0:09:3c:d2:67:13:6b:be: 39:95:15:21:a6:e9:73:b2:e7:a8:87:52:1b:94:04: bb:8d:f7:e4:40:38:25:2b:0b:6a:b6:a2:d1:cb:5d: 0a:69:27:6b:01:97:95:6f:33:24:7e:23:77:82:67: b0:e5:02:21:c0:bd:4e:d3:95:81:b6:67:40:00:1b: 92:73:27:ba:c2:53:92:56:b7:89:69:1c:fd:6b:01: 0c:39:05:9a:b9:06:5e:ce:6b:bf:24:10:9b:15:5e: b8:6b:b5:f8:e7:a9:45:09:1e:91:e4:b7:90:8d:68: 15:97:84:8a:ee:00:eb:c2:f8:5d:60:84:40:e2:3b: 41:69:48:2b:ef:9b:df:76:bc:28:63:af:37:60:a4: 80:83:37:09:8c:6c:85:f7:ec:54:4c:54:d2:ca:e7: b6:10:a0:b1:00:48:de:fa:ad:81:82:17:99:60:58: aa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EF:C0:48:29:B2:FB:00:5B:54:2B:26:3F:03:5D:FE:E9:D2:AF:EA X509v3 Authority Key Identifier: keyid:EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/1-u_ASCmy-wBbVCsmPwNd_unSr-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.188.0/23 178.21.152.0/21 185.31.24.0/22 193.23.48.0/24 194.0.251.0/24 IPv6: 2a02:dcc::-2a02:dce:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 18:e9:eb:67:c2:9c:ff:f4:2c:06:00:04:68:5b:75:ff:4f:9e: 5f:28:54:5c:fc:c0:ff:d3:29:bf:93:8f:cd:7b:9a:a0:48:35: 83:e4:51:ec:9b:6e:5a:c5:29:b8:4d:9a:19:90:b5:45:80:2f: 02:0c:38:76:6b:29:2c:09:fd:9b:85:5d:ed:32:5b:20:55:ac: d8:19:16:28:07:e7:7e:b9:f1:7f:3a:d3:3d:82:aa:0c:1d:db: d0:ac:1f:12:f7:e0:6a:a3:42:e9:74:96:1e:f6:68:74:6c:67: fe:17:b1:0b:4c:e2:af:bb:11:c9:53:b4:85:0c:3f:cb:92:6f: c9:ea:f7:94:02:30:71:c0:c6:95:b3:a4:2e:e7:1e:5f:ac:f8: 9d:80:88:e4:a3:38:9f:38:f8:50:7e:1c:de:50:cb:db:85:db: c3:7c:63:94:32:49:07:d6:3e:2c:99:4c:04:81:19:78:cb:28: a3:a1:9d:1c:0b:7e:a2:8a:4d:ba:e8:ba:29:ef:e7:ce:a8:cb: ea:63:6c:4e:68:87:f3:b5:c2:3b:36:dc:5b:07:43:f5:53:07: 3a:b6:ce:f6:a5:69:c8:ce:7c:5a:44:2b:0e:c8:4b:6d:85:62: e9:cc:e2:4c:6b:d0:92:58:92:55:2d:82:b0:69:ca:07:97:db: 78:a1:7c:84 -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgISAZt8ExeWyh32cu5YEqXXm0tTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjOWIwOTMxMTE4ZjA4YmY0YTM0YjNlMDUyZmQ4ZjhhNWMx ZWNhYjAwHhcNMjYwMTAyMDAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWVmYzA0ODI5YjJmYjAwNWI1NDJiMjYzZjAzNWRmZWU5ZDJhZmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEkdVRq+KCsJghQXsImyFt5v3Ol4 yWzY2FMav5c95rAsdoJNKX4V+MMgkeHvNCYC03G7rnoL5ZLLpPseNbUoT+f29IlW ZNIDzfi0naLgNHAMwAk80mcTa745lRUhpulzsueoh1IblAS7jffkQDglKwtqtqLR y10KaSdrAZeVbzMkfiN3gmew5QIhwL1O05WBtmdAABuScye6wlOSVreJaRz9awEM OQWauQZezmu/JBCbFV64a7X456lFCR6R5LeQjWgVl4SK7gDrwvhdYIRA4jtBaUgr 75vfdrwoY683YKSAgzcJjGyF9+xUTFTSyue2EKCxAEje+q2BgheZYFiq8wIDAQAB o4ICOjCCAjYwHQYDVR0OBBYEFPrvwEgpsvsAW1QrJj8DXf7p0q/qMB8GA1UdIwQY MBaAFOybCTERjwi/SjSz4FL9j4pcHsqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0pzSk1SR1BDTDlLTkxQZ1V2MlBpbHdleXJBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wNzc2YTItNWU4OS00ZTJjLTkzNzAt NWIzMDRlZWMwMDI1LzEvMS11X0FTQ215LXdCYlZDc21Qd05kX3VuU3Itby5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODMvMDc3NmEyLTVlODktNGUyYy05MzcwLTViMzA0ZWVjMDAy NS8xLzdKc0pNUkdQQ0w5S05MUGdVdjJQaWx3ZXlyQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBPBggrBgEFBQcBBwEB/wRAMD4wJAQCAAEwHgMEAVvCvAME A7IVmAMEArkfGAMEAMEXMAMEAMIA+zAWBAIAAjAQMA4DBQIqAg3MAwUAKgINzjAN BgkqhkiG9w0BAQsFAAOCAQEAGOnrZ8Kc//QsBgAEaFt1/0+eXyhUXPzA/9Mpv5OP zXuaoEg1g+RR7JtuWsUpuE2aGZC1RYAvAgw4dmspLAn9m4Vd7TJbIFWs2BkWKAfn frnxfzrTPYKqDB3b0KwfEvfgaqNC6XSWHvZodGxn/hexC0zir7sRyVO0hQw/y5Jv yer3lAIwccDGlbOkLuceX6z4nYCI5KM4nzj4UH4c3lDL24Xbw3xjlDJJB9Y+LJlM BIEZeMsoo6GdHAt+oopNuui6Ke/nzqjL6mNsTmiH87XCOzbcWwdD9VMHOrbO9qVp yM58WkQrDshLbYVi6cziTGvQkliSVS2CsGnKB5fbeKF8hA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:56 2026 by rpki-client